Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/aWT4gywFHj5dUWFI2v8rJKipfFU.roa
File: aWT4gywFHj5dUWFI2v8rJKipfFU.roa (raw, json)
Hash identifier: uQbgwPT5nXzB4U10FGLn/p8paytJKy/HJA0wSVQmWsQ=
Subject key identifier: 69:64:F8:83:2C:05:1E:3E:5D:51:61:48:DA:FF:2B:24:A8:A9:7C:55
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0197127A1976FEA56E2575140F76ED95BAF7
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/aWT4gywFHj5dUWFI2v8rJKipfFU.roa
Signing time: Tue 27 May 2025 16:01:21 +0000
ROA not before: Tue 27 May 2025 16:01:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47171
IP address blocks: 192.36.69.0/24 maxlen: 24
192.121.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:12:7a:19:76:fe:a5:6e:25:75:14:0f:76:ed:95:ba:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: May 27 16:01:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6964f8832c051e3e5d516148daff2b24a8a97c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2a:ef:e9:aa:16:7f:bf:8b:37:32:9c:f9:7d:
cd:b3:28:28:ca:74:23:72:cd:6d:96:61:58:03:ba:
19:18:f4:fd:6c:ff:12:90:df:76:d0:1d:cb:91:84:
23:ad:85:c8:d0:26:36:b5:46:5e:c8:b7:90:a9:30:
c6:4e:44:84:ad:0f:83:f4:e0:46:92:db:49:51:6d:
d9:46:27:c5:c8:42:5c:92:7a:12:dc:8d:10:bd:cc:
00:13:22:21:c8:77:e0:a2:53:00:b9:55:16:82:e1:
b3:6d:ea:74:1a:cb:b4:b1:64:db:14:37:f6:8e:36:
ea:ee:70:35:27:65:9d:f8:60:45:6c:16:03:25:f3:
3b:77:25:2a:3f:96:54:9a:4b:86:63:ad:d9:12:ee:
c3:d6:37:86:f5:80:a3:a4:42:20:ac:59:26:4d:1d:
3d:a0:57:c0:73:57:05:a7:2e:5b:85:3b:78:fd:33:
1d:bf:d3:20:a8:8c:d4:32:9c:12:05:11:a8:3e:a7:
f9:c6:29:f7:f7:4a:9e:f4:0c:5b:b5:90:14:84:5a:
4f:d5:c0:39:11:87:8f:fc:20:d9:ac:e2:c4:31:82:
91:f1:23:fa:5a:b7:28:a2:2a:49:a3:2f:29:3c:0f:
f4:6b:6e:a2:cd:b8:90:1a:a1:68:8f:17:97:31:15:
79:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:64:F8:83:2C:05:1E:3E:5D:51:61:48:DA:FF:2B:24:A8:A9:7C:55
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/aWT4gywFHj5dUWFI2v8rJKipfFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.69.0/24
192.121.200.0/22
Signature Algorithm: sha256WithRSAEncryption
c0:67:9f:e8:48:7b:b3:aa:19:c6:b3:9c:02:f8:ed:da:45:b9:
bc:0a:4b:17:db:63:e5:5d:fb:18:e9:52:27:ed:08:c3:09:51:
63:0a:63:38:8b:9b:b5:a7:78:93:1b:bb:dd:23:0f:a3:6a:28:
df:8d:2a:c9:ae:cf:18:ca:44:f9:47:a9:28:97:bc:3c:2c:60:
a0:d3:3f:53:e8:fa:81:3f:69:31:65:71:5f:9c:64:22:22:48:
08:8a:5d:7b:ef:b6:23:ac:6d:f1:93:43:11:f0:54:73:d6:4c:
e1:b1:22:b6:17:2c:95:bd:ab:39:74:db:92:b9:99:9e:f5:f7:
f6:45:a0:2c:41:82:9a:6c:b1:fc:58:7e:39:f7:bd:ae:78:c0:
aa:2b:7e:3d:52:96:c4:a3:9a:bf:cd:6f:a3:65:dc:07:a9:60:
cd:66:08:32:1b:c1:53:94:ea:b4:00:91:11:86:25:15:25:6a:
aa:e6:29:3d:1c:5f:6d:d4:c9:85:5e:03:d6:64:b0:eb:4a:21:
04:d5:16:7d:77:1e:9f:c0:94:bf:20:f1:1b:9d:1c:49:e4:27:
e5:6a:45:d6:05:59:33:b7:51:6a:22:af:70:3b:cb:e6:be:f0:
d0:a5:f8:81:98:26:4d:e3:56:da:ed:9c:c5:02:62:63:51:2c:
77:2b:f2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:02:06 2025 by rpki-client